SOC Engineer / Detection Engineer

The role

You will detect, investigate, and respond to security incidents across the environment. You will work with SIEM and incident response processes while improving detection and threat handling.

What you will do

• Lead and support end-to-end response to security incidents
• Conduct in-depth investigations into suspicious activity and alerts
• Drive post-incident reviews and root cause analyses
• Implement, tune, and maintain SIEM use cases and detection rules
• Provide ongoing support for the SIEM platform
• Partner with Engineering, IT, and other Security teams to remediate findings
• Identify gaps in detection, response, and documentation to drive improvements

Required qualifications

• Hands-on experience handling security incidents
• Strong analytical ability to investigate alerts and logs
• Practical experience implementing and tuning detection rules/use cases in a SIEM
• Ability to write clear post-mortems, RCAs, and incident reports
• Ability to work cross-functionally with engineering and other security teams
• Track record of identifying and driving improvements to detection and response processes
• Linux/Unix proficiency
• Comfort working across cloud (e.g., AWS) log sources

Nice to have

• Experience with detection engineering frameworks (e.g., MITRE ATT&CK)
• Familiarity with scripting/automation (Python, etc.)
• Understanding of compliance frameworks (ISO 27001, NIST, SOC2)
• Relevant certifications (e.g., GCIH, GCFA, Security+, SC-200, or SIEM-specific certifications)

About the company

Talkdesk is pioneering a new era of Customer Experience Automation (CXA) through AI. The company is recognized as a Leader in the Gartner® Magic Quadrant™ for Contact Center as a Service (CCaaS).